Improved linear(hull)cryptanalysis of round-reduced versions of SIMON  

作　　者：Danping SHI Lei HU Siwei SUN Ling SONG Kexin QIAO Xiaoshuang MA 

机构地区：[1]State Key Laboratory of Information Security,Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China [2]Data Assurance and Communication Security Research Center,Chinese Academy of Sciences,Beijing 100093,China [3]University of Chinese Academy of Sciences,Beijing 100093,China

出　　处：《Science China(Information Sciences)》2017年第3期219-221,共3页中国科学（信息科学）（英文版）

基　　金：supported by National Basic Research Program of China(Grant No.2013CB834203);National Natural Science Foundation of China(Grant Nos.61472417,61472415,61402469);Strategic Priority Research Program of the Chinese Academy of Sciences(Grant No.XDA06010702);State Key Laboratory of Information Security,Chinese Academy of Sciences

摘　　要：Dear editor, SIMON is a family of lightweight block ciphers proposed by the U.S. National Security Agency in 2013 [1]. It employs a Feistel structure, and performs well in hardware and software implementations. The algorithm has attracted much cryptanalytic interest, including differential analysis [2-6] and linear cryptanalysis [7].Dear editor, SIMON is a family of lightweight block ciphers proposed by the U.S. National Security Agency in 2013 [1]. It employs a Feistel structure, and performs well in hardware and software implementations. The algorithm has attracted much cryptanalytic interest, including differential analysis [2-6] and linear cryptanalysis [7].

关 键 词：SIMON 线性分析 线性闭包 相关度 成功概率 密钥恢复 

分 类 号：TN918.2[电子电信—通信与信息系统]